Security Alert (A26-10-06): Vulnerability in Microsoft Exchange Server

Description:

Microsoft has released a security update to address a vulnerability in Microsoft Exchange Server. A remote attacker could entice a user to open a web page with specially crafted content on a vulnerable browser to exploit the vulnerability.

Affected Systems:

• Microsoft Exchange Server 2016 Cumulative Update 23
• Microsoft Exchange Server 2019 Cumulative Update 14, Cumulative Update 15
• Microsoft Exchange Server Subscription Edition RTM

For detailed information of the affected systems, please refer to the corresponding security advisory at vendor's website.

Impact:

Successful exploitation of the vulnerability could lead to elevation of privilege on an affected system.

Recommendation:

Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://support.microsoft.com/help/5129955
• https://support.microsoft.com/help/5129956
• https://support.microsoft.com/help/5129957
• https://support.microsoft.com/help/5129958
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96940